The Design And Implementation Of The Fcoe Network Access Control Based On Zone Protocol

In recent years,the market of data center network equipment is in rapid growth.The Integration of network can greatly reduce the cost of a data center. So it is oneof the most important development direction of the data center. In order to meet thenew IT ageusers in the higher demand on the level of IT and business,hold thebalance between IT and business at the same time, through technical innovation todrive change in strategy on the concrete implementation,through H3C cloud,fusiondata center to the CDC, software definition BYOD network SDN,IT mobile, newoperating network flexcarrier, Smartcity. such as technical scheme, in the businessdefinition, control layer, virtualization, many aspects, such as physical device layer to giveeffective support to the user’s business, new business online help the user to shorten the timeand time of business change to IT resource utilization, realize resource optimize.In this paper, based on the fusion of Ethernet network and data center network andthe determination of FCoE standards in order to ensure the data security of FCoEnetwork, make up for the Vsan agreement may cause security flaws. Existingswitches forward by analyzing the bottleneck, the delay is proposed from the Angleof the chip can be implemented by hardware Zone of examination, and furtherthrough the design and implement hardware Zone to improve the speed of networksafety inspection, to improve the efficiency of forward exchange. Think in terms ofcompatibility to a variety of virtualization strategy, fully compatible with the wholeproduct line of products.This project was designed and implemented using C language FCoE switch driverlayer control, network security zone-based agreement, in the design, hardware Zonecan be divided into three layers, respectively is the interface layer, function layer andhardware list item, the interface layer implements the switch software interface,direct call for the command line or other modules. In this layer is responsible for aseries of inspection work, only function is to realize the specific function of theinterface, is responsible for implementing the function of processing logic, hardwarelist items to switch chip that the above-mentioned item set, in this layer mainly callchip vendors SDK, to encapsulate the SDK, set the Zone need specific hardware list,complete issued by hardware, the hardware automatic inspection. To optimize theefficiency of the Zone to check and improve the performance of the switch, solvesthe bottleneck of the problems of software layer before inspection.Proved through the actual test, this system completed the FCoE effective securityaccess control network, established a complete set of can be compatible with avariety of virtualization architecture, compatible with all products of driver layer security access mechanism, correctly deal with message, discarded or forwarding amessage, will not cause protocol packet is discarded. Meet our switches productfunctional requirements, and the demand of the performance and efficiency, has highreusability and practical value.